CVE-2026-7328 Unverified AXI Address in Subsystem Mode Commands Enables Denial of Service

Missing authorization in Caliptra Core Runtime Firmware INVOKEDPEMLDSA87, CMAESGCMDECRYPTDMA, EXTERNALMAILBOXCMD commands in subsystem mode allows a privileged local attacker to cause a denial of service via mailbox commands containing unverified AXI addresses. The security impact beyond...

CVE-2026-7328

CVE-2026-7328 concerns Caliptra Core Runtime Firmware (2.1.0) and reports missing authorization in subsystem mode for INVOKE_DPE_MLDSA87, CM_AES_GCM_DECRYPT_DMA, and EXTERNAL_MAILBOX_CMD commands. This allows a privileged local attacker to trigger a denial-of-service via mailbox commands that con...

CVE-2026-7328

Missing authorization in Caliptra Core Runtime Firmware INVOKEDPEMLDSA87, CMAESGCMDECRYPTDMA, EXTERNALMAILBOXCMD commands in subsystem mode allows a privileged local attacker to cause a denial of service via mailbox commands containing unverified AXI addresses. The security impact beyond...

CVE-2026-7328 Unverified AXI Address in Subsystem Mode Commands Enables Denial of Service

Missing authorization in Caliptra Core Runtime Firmware INVOKEDPEMLDSA87, CMAESGCMDECRYPTDMA, EXTERNALMAILBOXCMD commands in subsystem mode allows a privileged local attacker to cause a denial of service via mailbox commands containing unverified AXI addresses. The security impact beyond...

CVE-2026-44276

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the REST API. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2026-16552

Rejected reason: The reported issue is invalid, as it requires root privileges to reproduce, and it is out of scope of the threat model of the affected component...

CVE-2026-16552

The reported issue is invalid, as it requires root privileges to reproduce, and it is out of scope of the threat model of the affected component...

EUVD-2026-47735

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contains an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

Uncontrolled Recursion

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Uncontrolled Recursion via the query evaluation. An attacker can cause the affected node to terminate by submitting a specially...

CVE-2026-44276

Dell PowerProtect Data Manager prior to version 20.2.0.0 contains CVE-2026-44276: REST API exposes sensitive information to an unauthorized actor. A high-privilege attacker with local access could potentially exploit this vulnerability to cause information exposure (CVSSv3.1: 6.0, Local attack, P...

CVE-2026-44276

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the REST API. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2026-16270

Open Mercato does not validate regex rules. An attacker with privileges to create the regex rule can add an unsafe regex to a field. When someone provide the proper string it can result in a DoS attack. This issue was fixed in version 0.6.4...

EUVD-2026-47649

Open Mercato does not validate regex rules. An attacker with privileges to create the regex rule can add an unsafe regex to a field. When someone provide the proper string it can result in a DoS attack. This issue was fixed in version 0.6.4...

GHSA-7M3P-WC52-RMC6 Duplicate Advisory: Traefik CRD IngressRouteTCP ServersTransport Cross-Provider Namespace Bypass

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-42cj-m3vj-89wv. This link is maintained to preserve external references. Original Description Traefik 3.6.0 through 3.6.22 and 3.7.0 through 3.7.6 fail to enforce the crossProviderNamespaces allowlist for...

Duplicate Advisory: Traefik CRD IngressRouteTCP ServersTransport Cross-Provider Namespace Bypass

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-42cj-m3vj-89wv. This link is maintained to preserve external references. Original Description Traefik 3.6.0 through 3.6.22 and 3.7.0 through 3.7.6 fail to enforce the crossProviderNamespaces allowlist for...

CVE-2026-65602

Traefik 3.6.0 through 3.6.22 and 3.7.0 through 3.7.6 fail to enforce the crossProviderNamespaces allowlist for IngressRouteTCP service serversTransport references the allowlist was only enforced for HTTP serversTransport references. A low-privileged Kubernetes user in a namespace not listed in...

CVE-2026-65602

Traefik (3.6.0–3.6.22 and 3.7.0–3.7.6) fails to enforce crossProviderNamespaces allowlist for IngressRouteTCP serversTransport, permitting a low-privilege namespace user to set serversTransport: foo@file on an IngressRouteTCP service. This can cause Traefik to accept a cross-provider reference an...

CVE-2026-65597 n8n before 1.123.64 DOM-Based XSS via Unsandboxed iframe

n8n before 1.123.64, 2.x before 2.29.8, and before 2.30.1 contains a DOM-based cross-site scripting vulnerability in the HTML preview, which renders execution output into an iframe srcdoc without the sandbox attribute. A sanitizer bypass allows injected script to execute same-origin as the editor...

CVE-2026-65592

n8n is affected by a stored DOM XSS in the Resource Locator component for versions before 1.123.64, 2.29.8, and 2.30.1. The vulnerability arises because the workflow-persisted cachedResultUrl is passed to window.open() without scheme validation. An attacker with workflow creation/editing privileg...

CVE-2026-65592

n8n before 1.123.64, 2.29.8, and 2.30.1 contains a stored DOM cross-site scripting vulnerability in the Resource Locator component, which passes the workflow-persisted cachedResultUrl parameter to window.open without scheme validation. An attacker with workflow creation/editing privileges can cra...